A method for smooth upgrading of running pki/ca authentication system

Abstract

A method for smooth upgrading of a running PKI / CA certification system, including an overall architecture for a smooth upgrade of a running PKI / CA certification system; the overall architecture for a smooth upgrade of a running PKI / CA certification system includes an infrastructure layer, a cryptographic computing interface layer, and a general algorithm component , certificate application middleware and general desktop suite; the infrastructure layer consists of the existing authentication infrastructure and the new authentication infrastructure, which are used to provide basic keys and certificates, and drive the interface through the cryptographic device The computing interface layer provides algorithm applications; certificate application middleware and general desktop suites. The present invention realizes the coexistence of old and new certification systems, ensures that the software calling interface, calling sequence, and calling methods of the application system are consistent with the original PKI / CA certification system, so that the application system does not undergo source code modification; by adding a virtual medium driver layer, automatic Identify the old and new cryptographic algorithms, and realize the user's dynamic switching of terminal authentication media.

Description

technical field [0001] The invention relates to a public key infrastructure in the field of information security, in particular to the field of an upgrade method from an old authentication system to a new authentication system, and in particular to a method for smoothly upgrading an operating state PKI / CA authentication system. Background technique [0002] Digital certificate technology (also known as PKI technology or CA technology) has become the best technology to solve problems such as identity authentication, data confidentiality and integrity, and behavioral non-repudiation. be widely used. [0003] Most domestic enterprises have gradually established a PKI / CA authentication system, which is used for identity authentication of operating systems and application systems, and provides digital signature and encryption functions for important and confidential data. However, most of them use unsafe cryptographic algorithms, which do not meet the password management require...

AI Technical Summary

Problems solved by technology

[0006] 1. All application systems must be modified in a targeted manner, and it is difficult to universally support various types of application systems

[0007] 2. It is difficult for the client to support the old and new certification systems at the same time, and users can only use the medium of one certification system

[0008] 3. It does not support staged and batched upgrades. The application system must be upgraded first, and then the client should be upgraded.

[0009] Because the above-mentioned problems have not been solved, the information security field urgently needs to realize the certification system / encryption algorithm upgrade requirements, and the enterprise units have not actually implemented them.

Images